RBI brings cross border transactions under e-mandate rules, allows customer to opt out anytime — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 26, 2026

Severity: MEDIUM | View Full Scam Details

RBI Brings Cross-Border Transactions Under E-Mandate Rules in 2026: Beware of UPI Fraud Scams

Scammers are exploiting new RBI guidelines on cross-border e-mandates to trick Indian users into recurring fraudulent UPI payments.

What Is the RBI Brings Cross Border Transactions Under E-Mandate Rules, Allows Customer to Opt Out Anytime?

In 2026, the Reserve Bank of India (RBI) officially brought cross-border transactions under the e-mandate framework. This means Indian customers can now set up recurring payments for international subscriptions, memberships, or services that debit amounts automatically through UPI or linked bank accounts. Alongside this, the RBI made it clear that customers have the right to revoke or opt out of these mandates anytime.

While this is a positive step in simplifying payments for legitimate users, cybercriminals have quickly leveraged the new rules to launch UPI fraud scams targeting uninformed citizens. Most victims are everyday Indians who use WhatsApp or other social media platforms to receive offers about easy cross-border payment setups. Scammers pose as bank officials, financial advisors, or representatives of payment platforms like Google Pay or PhonePe, luring victims with promises of hassle-free international transactions with “exclusive” e-mandate benefits.

India’s Computer Emergency Response Team (CERT-In) and the Indian Cyber Crime Coordination Centre (I4C) have both issued advisories about scams exploiting this new regulation. While the scam is currently rated medium severity (5/10 risk), the number of fraud cases has risen in urban and semi-urban areas where cross-border payments loom large — like for online education, OTT subscriptions, or e-commerce imports.

How This Scam Works — Step by Step

1. Initial Contact via WhatsApp or Email: The scam usually starts with a message or email claiming to be from your bank, RBI, or a trusted payment platform stating there’s a new RBI guideline to simplify international payments with e-mandates.

2. Scammer Poses as a Bank or Payment Expert: The fraudster contacts you pretending to be a customer support executive or financial advisor. They may offer help to “activate” this new e-mandate facility or “save money on forex charges using the RBI rule.”

3. Request to Set Up an E-Mandate Link: They send you a phishing link or a fake UPI payment request that looks authentic but is actually designed to collect your UPI PIN or partial Aadhaar details tied to payment authentication.

4. Psychological Pressure and Urgency: Scammers use fear tactics, saying your account will be blocked or that you will lose out on benefits if you don’t complete the process immediately. This psychological manipulation picks up speed to avoid giving you time to think or verify.

5. Unauthorized Recurring Transactions Begin: Once you approve the e-mandate or share details, the fraudster sets up unauthorized recurring payments to offshore accounts, making multiple small debits via UPI or net banking. These often fly under the radar initially.

6. Victims Notice Money Missing: After a few days or weeks, victims see unexplained deductions on their bank statements or UPI transaction history but find it hard to reverse due to alleged “valid e-mandates.”

7. Difficulty in Cancellation: Though RBI allows customers to opt out anytime, the scammers complicate this by blocking communication, changing numbers, or providing fake customer care details, prolonging the fraud.

Real Warning Signs to Watch For

• Unexpected WhatsApp or email messages claiming to represent RBI or banks about “new cross-border e-mandate rules.”
• Urgent language pressuring you to act immediately to avoid “service disruption” or “account freezes.”
• Requests for your UPI PIN, OTP, or Aadhaar details via chat or email—official entities never ask for these.
• Links that direct you to pages with URLs slightly different from your bank or payment app’s official website.
• Promises of saving money on forex charges or exclusive offers that seem too good to be true.
• Recurring small deductions from your account that you did not authorize consciously.
• Difficulty or refusal from “customer support” to cancel the e-mandate or reverse transactions.

What Happens to Victims

Victims of this scam often face unexpected financial losses as multiple unauthorized recurring UPI transactions drain their bank accounts. Since UPI transactions are instant and sometimes irreversible without bank cooperation, recovering funds can be challenging. Victims may also suffer Aadhaar misuse if biometric or personal details are collected, leading to further identity theft or SIM swap frauds that jeopardize mobile-linked banking services.

Emotionally, victims experience stress and loss of trust in digital payments, fearing future fraud. In India, where mobile wallets and UPI penetration are still growing, such scams undermine the digital economy’s trust fabric, affecting millions relying on these services for everyday expenses.

What RBI and CERT-In Say

The RBI has underscored that customers should review all e-mandates carefully before approval and exercise their right to revoke unwanted mandates immediately via their bank or payment app settings. Officials remind users to never share UPI PIN or OTP with anyone.

CERT-In advises vigilance against phishing links and urges users to verify all messages claiming to be from banks or RBI through official channels or help lines. The Indian Cyber Crime Coordination Centre (I4C) recommends reporting suspicious messages to cybercrime.gov.in and using the National Cyber Crime Helpline at 1930 for prompt assistance.

The RBI Customer Helpline (1800-120-1234) also provides specific support for payment-related frauds, helping victims block accounts or dispute unauthorized transactions.

How to Protect Yourself

1. Do not click on unsolicited links or share details from messages or emails claiming to be from RBI or payment apps about e-mandates.
2. Verify any communication by calling your bank’s official helpline or checking the bank’s app directly.
3. Never share your UPI PIN, OTP, Aadhaar, or bank password with strangers—even if they claim to be officials.
4. Regularly check your bank statements and UPI app transaction history for any unauthorized recurring payments.
5. Use your bank or wallet app’s built-in feature to view and cancel existing e-mandates promptly.
6. Install official apps only from Google Play Store or Apple App Store to avoid fake payment apps.
7. Report any scam attempt immediately through cybercrime.gov.in or call 1930 for help.

What to Do If You’ve Been Targeted

1. Immediately contact your bank’s customer support and request to freeze or block all recurring mandates linked to your account.
2. Change your UPI PIN and linked mobile number’s SIM immediately to prevent further unauthorized transactions.
3. Lodge a complaint on the National Cyber Crime Reporting Portal at cybercrime.gov.in with all scam details.
4. Call the National Cyber Crime Helpline at 1930 to report the incident and seek guidance.
5. Inform your payment app provider (Google Pay, PhonePe, etc.) about unauthorized payments and request transaction reversal.
6. File a police complaint citing cyber fraud; this is often necessary for legal recourse and insurance claims.
7. Monitor your bank account and Aadhaar-linked services closely for any unexpected activity.

Frequently Asked Questions

Q: Can I revoke cross-border e-mandates anytime as per RBI rules?
Yes. RBI allows customers to opt out or revoke any e-mandate at any point through their bank or payment app without needing the merchant’s consent.

Q: What should I do if I accidentally shared my UPI PIN with a scammer?
Immediately change your UPI PIN via your banking app, inform your bank to block suspicious transactions, and report the fraud to cybercrime.gov.in. Also, monitor your account for unauthorized activity.

Q: How do I verify if a message about RBI’s new e-mandate rule is genuine?
Always cross-check such messages on RBI’s official website or call the RBI helpline. Avoid clicking on any direct links in messages or emails. Trusted banks and payment apps never request sensitive info via WhatsApp or email.

If you receive suspicious messages or offers about cross-border e-mandates or recurring UPI payments, don’t fall prey to scams. Verify every message at BharatSecure.app — India’s trusted digital fraud awareness platform helping you stay safe online.